      Event backup : backup() ;
      Event logout : logout() ;
      Predicate active : ActiveUserNum > 0 ;
      Formula : 
         // Backup starts only after all users are logged out
         [*] (start(backup)->[logout, active)s)
      Violation Handler:
         throw new RuntimeException("Backup start failed!");
